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1 Introduction 

This short paper provides a summary of the tutorial on categorical logic given 
by the second named author at the Logic Colloquium in Nijmegen. Before we 
go into the subject matter, we would like to express our thanks to the organisers 
for an excellent conference, and for offering us the opportunity to present this 
material. 

Categorical logic studies the relation between category theory and logical 
languages, and provides a very efficient framework in which to treat the syntax 
and the model theory on an equal footing. For a given theory T formulated 
in a suitable language, both the theory itself and its models can be viewed as 
categories with structure, and the fact that the models are models of the theory 
corresponds to the existence of canonical functors between these categories. This 
applies to ordinary models of first order theories, but also to more complicated 
topological models, forcing models, realisability and dialectica interpretations 
of intuitionistic arithmetic, domain-theoretic models of the A-calculus, and so 
on. One of the best worked out examples is that where T extends the theory 
HHA of higher order Heyting arithmetic [2^, which is closely related to the 
Lawvere-Tierney theory of elementary toposes. Indeed, every elementary topos 
(always taken with a natural numbers object here) provides a categorical model 
for HHA, and the theory HHA itself also corresponds to a particular topos, 
the "free" one, in which the true sentences are the provable ones. 

The logic of many particular toposes shares features of independence results 
in set theory. For example, there are very natural constructions of toposes which 
model HHA plus classical logic in which the axiom of choice fails, or in which 
the continuum hypothesis is refuted. In addition, one easily finds topological 
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sheaf toposes which model famous eonsistency results of intuitionistic logic, 
such as the consistency of HHA plus the continuity of all real- valued functions 
on the unit interval, and realisability toposes validating HHA plus "Church's 
thesis" (all functions from the natural numbers to itself are recursive). It took 
some effort (by Freyd, Fourman, McCarthy, Blass and Scedrov [151 El IHl 
[T^ and many others), however, to modify the constructions so as to provide 
models proving the consistency of such statements with HHA replaced by an 
appropriate set theory such as ZF or its intuitionistic counterpart IZF. This 
modification heavily depended on the fact that the toposes in question, namely 
various so-called Grothendieck toposes and Hyland's effective topos [53], were 
in some sense defined in terms of sets. 

The original purpose of "algebraic set theory" [27] was to identify a categor- 
ical structure independently of sets, which would allow one to construct models 
of set theories like (I)ZF. These categorical structures were pairs {£,S) where 
f is a category much like a topos, and iS is a class of arrows in £ satisfying 
suitable axioms, and referred to as the class of "small maps". It was shown in 
loc. cit. that any such structure gave rise to a model of (I)ZF. An important 
feature of the axiomisation in terms of such pairs {£,S) is that it is preserved 
under the construction of categories of sheaves and of realisability categories, so 
that the model constructions referred to above become special cases of a general 
and "elementary" preservation result. 

In recent years, there has been a lot of activity in the field of algebraic set the- 
ory, which is well documented on the web site www.phil.cmu.edu/projects/ast. 
Several variations and extensions of the the original Joyal-Moerdijk axioma- 
tisation have been developed. In particular, Alex Simpson |35j developed an 
axiomatisation in which £ is far from a topos (in his set-up, £ is not exact, and 
is only assumed to be a regular category). This allowed him to include the exam- 
ple of classes in IZF, and to prove completeness for IZF of models constructed 
from his categorical pairs {£,S). This approach has been further developed by 
Awodey, Butz, Simpson and Streicher in their paper [5], in which they prove 
a categorical completeness theorem characterising the category of small objects 
in such a pair {£,S) (cf. Theorem 13.91 below) . and identify a weak "basic" intu- 
itionistic set theory BIST corresponding to the core of the categorical axioms 
in their setting. 

In other papers, a variant has been developed which is adequate for con- 
structing models of predicative set theories like Aczel's theory CZF [Tl[2]. The 
most important feature of this variant is that in the structure (£,S), the exis- 
tence of suitable power objects is replaced by that of inductive W-types. These 
W-types enabled Moerdijk and Palmgren in [33] to prove the existence of a 
model V for CZF out of such a structure {£,S) on the basis of some exact- 
ness assumptions on £, and to derive the preservation of (a slight extension of) 
the axioms under the construction of sheaf categories. This result was later 
improved by Van den Berg f8]. It is precisely at this point, however, that we 
believe our current set-up to be superior to the ones in [331 and [8] , and we will 
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come back to this in some detail in Section 6 below. We should mention here 
that sheaf models for CZF have also been considered by Gambino [20] and to 
some extent go back to Grayson [55] ■ Categorical pairs S) for weak predica- 
tive set theories have also been considered by Awodey- Warren [5] and Simpson 
[5S] . (Note, however, that these authors do not consider W- types and only deal 
with set theories weaker than Aczel's CZF.) 

The purpose of this paper is to outline an axiomatisation of algebraic set 
theory which combines the good features of all the approaches mentioned above. 
More precisely, we will present axioms for pairs {£,5) which 

• imply the existence in £ of a universe V , which models a suitable set 
theory (such as IZF) (cf. Theorem 14. II below) : 

• allow one to prove completeness theorems of the kind in [5S] and [3] 
(cf. Theorem 13.71 and Theorem 13.91 below): 

• work equally well in the predicative context (to construct models of CZF); 

• are preserved under the construction of sheaf categories, so that the usual 
topological techniques automatically yield consistency results for IZF, 
CZF and similar theories; 

• hold for realisability categories (cf. Examples 5.3 and 5.4 and Theorem 
Theorem FM]). 

Before we do so, however, we will recall the axioms of the systems IZF and 
CZF of set theory. In the next Section, we will then present our axioms for small 
maps, and compare them (in Subsection 3.4) to those in the literature. One of 
the main features of our axiomatisation is that we do not require the category 
£ to be exact, but only to possess quotients of "small" equivalence relations. 
This restricted exactness axiom is consistent with the fact that every object is 
separated (in the sense of having a small diagonal) , and is much easier to deal 
with in many contexts, in particular those of sheaves. Moreover, together with 
the GoUection axiom this weakened form of exactness suffices for many crucial 
constructions, such as that of the model V of set theory from the universal small 
map E ^ U, or of the associated sheaf of a given presheaf. In Section 4 we 
will describe the models of set theory obtained from pairs {£,S) satisfying our 
axioms, while Section 5 discusses some examples. Finally in Sections 6 and 7, we 
will discuss in some detail the preservation of the axioms under the construction 
of sheaf and realisability categories. 

Like the tutorial given at the conference, this exposition is necessarily con- 
cise, and most of the proofs have been omitted. With the exception perhaps of 
Sections 6 and 7, these proofs are often suitable adaptations of existing proofs in 
the literature, notably [27l [35l [33l [3l [6] . A complete exposition with full proofs 
will appear as [10] . 
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2 Constructive set theories 

In this Section we recall the axioms for the two most prominent constructive 
variants of Zermelo-Praenkel set theory, IZF and CZF. Like ordinary ZF, these 
two theories arc formulated in first-order logic with one non-logical symbol e. 
But unlike ordinary set theory, these theories are constructive, in that their 
underlying logic is intuitionistic. 

In the formulation of the axioms, we use the following standard abbrevia- 
tions: 3xea (...) for 3x {xea A . . .), and Vxea (...) for Va; (xea . . .). Recall also 
that a formula is called bounded, when all the quantifiers it contains are of one 
of these two forms. Finally, a formula of the form Va;ea 3yeb (j) A Vyeb 3xea 4> will 
be abbreviated as: 

B(a;ea, yeb) (j). 

The axioms which both theories have in common are (the universal closures 

of): 

Extensionality: Va; ( xea xeb ) ^ a = b. 

Empty set: 3x\ly^yex. 

Pairing: 3x\/y{yex ^-^ y = aW y = b). 

Union: 3xyy {yex 3zeayez). 
e-induction: Vx {Vyex (j){y) (pix)) ^ V.T(/)(.t) 

Bounded separation: 3a; Vy {yex ^ yea A (j){y) ), for any bounded formula 
in which a does not occur. 

Strong collection: \/xea3y (j){x,y) — > 3bB{xea,yeb) (j). 

Infinity: 3a ( 3a; xea ) A ( Vxea 3yea xey ) . 

One can obtain an axiomatisation for the constructive set theory IZF by 
adding to the axioms above the following two statements: 

Full separation: 3x\/y{yex <-> yeah(j){y) ), for any formula (j) in which a does 
not occur. 

Power set axiom: 3x Vy ( yex y C a). 
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To obtain the predicative constructive set theory CZF, one should add in- 
stead the following axiom (which is a weakening of the Power Set Axiom); 

Subset collection: 3c\fz(\fxea3yeb(l){x,y,z) 3decJi{xea,yed) (f>{x,y, z)). 

The Subset Collection Axiom has a more palatable formulation (equivalent to 
it relative to the other axioms), called Fullness (see |2). Write mv(a, b) for the 
class of all multi-valued functions from a set a to a set &, i.e. relations R such 
that \/xea 3yeb {x, y)eR. 

Fullness: 3u [u C mv(a, b) A Vwemv(a, b) 3weu {w C v)). 

Using this formulation, it is also easier to see that Subset Collection implies 
Exponentiation, the statement that the functions from a set a to a set b form a 
set. 



3 Categories with small maps 

Here we introduce the categorical structure which is necessary to model set 
theory. The structure is that of a category £ equipped with a class of morphisms 
S, satisfying certain axioms and being referred to as the class of small maps. 
The canonical example is the one where £ is the category of classes in a model 
of some weak set theory, and morphisms between classes are small in case all 
the fibres are sets. More examples will follow in Section 5. In Section 4, we 
will show that these axioms actually provide us with the means of constructing 
models of set theory. 

3.1 Axioms 

In our work, the underlying category £ is a Hey ting category with sums. More 
precisely, £ satisfies the following axioms (for an excellent account of the notions 
involved, see [251 Part Al]): 

• £ is cartesian, i.e. it has finite limits. 

• £ is regular, i.e. every morphism factors as a cover followed by a mono 
and covers are stable under puUback. 

• £ has finite disjoint and stable coproducts. 

• £ is Heyting, i.e. for any morphism /: X >Y the functor /*: Sub(F) >Sub(X) 

has a right adjoint V/. 
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This expresses precisely that f is a categorical structure suitable for modelling 
a typed version of first-order intuitionistic logic with finite product and sum 
types. 

We now list the axioms that we require to hold for a class of small maps, 
extending the axioms for a class of open maps (see ^7\). We will comment on 
the relation between our axiomatisation and existing alternatives in Section 3.4 
below. 

The axioms for a class of open maps S are: 



(Al) (Fullback stability) In any puUback square 

D >B 

a f 



where / G 5, also g ^ S. 
(A2) (Descent) Whenever in a puUback square as above, g & S andp is a cover, 

(A3) (Sums) Whenever X >Y and X' yY' belong to S, so does X + 

X' >Y + Y'. 

(A4) (Finiteness) The maps yl, 1 >-l and 2 = 1 + 1 >1 belong to S. 

(A5) (Composition) S is closed under composition. 
(A6) (Quotients) In any commutative triangle 




where p is a cover and g belongs to S, so does /. 



These axioms are of two kinds: the axioms (Al-3) express that the property 
we are interested in is one of the fibres of maps in S. The others are more 
set-theoretic: (A4) says that the collections containing 0, 1 or 2 elements are 
sets. (A5) is a union axiom: the union of a small disjoint family of sets is again 
a set. Finally, (A6) is a form of replacement: the image of a set is again a set. 

We will always assume that a class of small maps S satisfies the following 
two additional axioms, familiar from j27| : 
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(C) (Collection) Any two arrows p: Y >X and /: X >A where p is a cover 

and / belongs to S fits into a quasi-puUback diagrarrQ of the form 

Z >Y —^X 

9 f 
B 7 » A 

h 

where /i is a cover and g belongs to S. 

(R) (Representability, see Remark l3.4p There exists a small map tt: E )-U (a 

"universal small map") such that for every small map /: X )■¥ there is 

a diagram of the shape 

X« A >E 

/ 

Y B > U, 

where the left square is a quasi-puUback, the right square is a puUback 
and p is a cover. 

The collection principle (C) expresses that in the internal logic it holds that 

for any cover p:Y >X with small codomain there is a cover Z >X with 

small domain that factors through p, while (R) says that there is a (necessarily 
class-sized) family of sets {Eu)u^u such that any set is covered by one in this 
family. 

The next requirement is also part of the axioms in [27]. For a morphism 

f:X )-Y , the puUback functor f*:£/Y y£/X always has a left adjoint S/ 

given by compositioiH. It has a right adjoint 11/ only when / is exponentiable. 

(HE) (Existence of H) The right adjoint Ily exists, whenever / belongs to S. 

This intuitively means that for any set A and class X there is a class of functions 
from AtoX. 

When / is exponentiable, one can define an endofunctor Pf (the polynomial 
functor associated with /) as the composition: 

Pf = 

Its initial algebra (whenever it exists) is called the W-type associated to /. 
For extensive discussion and examples of these W-types we refer the reader to 
[32l [6l [2T]. We impose the axiom (familiar from [321119]): 

^Recall that a commutative square in a regular category is called a quasi-puUback if the 
unique arrow from the initial vertex of the square to the inscribed puUback is a cover. 
^We will write X* and T,x for /* and Tij, where / is the unique map X >1. 
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(WE) (Existence of W) The W-type associated to any map f:X >Y in S 

exists. 

In non-categorical terms this means that for a signature consisting of a (possibly 
class-sized) number of term constructors each of which has an arity forming a 
set, the free term algebra exists (but maybe not as a set). 

The following two axioms are necessary to have bounded separation as an 
internally valid principle (see Remark l3.3p . For this purpose we need a piece of 
terminology: call a subobject 

m:A> > X 

5-bounded, whenever m belongs to S; note that the iS-bounded subobjects form 
a submeetsemilattice of Sub(X). We impose the following axiom: 

(HB) (Heyting axiom for bounded subobjects) For any small map /: Y >X 

the functor V/: Sub(F) ^Sub(X) maps 5-bounded subobjects to 5-bounded 

subobjects. 

In addition, we require that all equalities are bounded. Call an object X sepa- 
rated, when the diagonal A: X >X x X is small. We furthermore impose (see 

my- 

(US) (Universal separation) All objects are separated. 

We finally demand a limited form of exactness, by requiring the existence 
of quotients for a restricted class of equivalence relations. To formulate this 
categorically, we recall the following definitions. Two parallel arrows 

ro 

R^^X 

ri 

in category £ form an equivalence relation when for any object A in £ the 
induced function 

Hom(^,i?) >Hom(A,X) x Hom(y4,X) 

is an injection defining an equivalence relation on the set llom{A,X). We call 
an equivalence relation bounded, when i? is a bounded subobject of X x X. 

A morphism q: X >Q is called the quotient of the equivalence relation, if the 

diagram 

ro g 

ff ] X O 

ri 

is both a puUback and a coequaliser. In this case, the diagram is called exact. 
The diagram is called stably exact, when for any p: P > Q the diagram 

v*R 1 v*X v*0 

p'ri 
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is also exact. If the quotient completes the equivalence relation to a stably exact 
diagram, we call the quotient stable. 

In the presence of (US), any equivalence relation that has a (stable) quotient, 
must be bounded. So our last axiom imposes the maximum amount of exactness 
that can be demanded: 

(BE) (Bounded exactness) All 5-bounded equivalence relations have stable 
quotients. 

This completes our definition of a class of small maps. A pair (f , S) satisfying 
the above axioms now will be called a category with small maps. 

When a class of small maps S has been fixed, we call a map / small if it 

belongs to S, an object A small if A >■ 1 is small, a subobject m: A yX small 

if A is small, and a relation R C C x D small if the composite 

RCC X D >D 

is small. 

We conclude this Subsection with some remarks on a form of exact comple- 
tion relative to a class of small maps. As a motivation, notice that axiom (BE) 
is not satisfied in our canonical example, where £ is the category of classes in a 
model of some weak set theory. To circumvent this problem, we will prove the 
following theorem in our companion paper |10j : 

Theorem 3.1 The axiom (BE) is conservative over the other axioms, in the 
following precise sense. Any category £ equipped with a class of maps S sat- 
isfying all axioms for a class of small maps except (BE) can be embedded in 
a category £ equipped with a class of small maps S satisfying all the axioms, 

including (BE). Moreover, the embedding y: £ >£ is fully faithful, bijective 

on subobjects and preserves the structure of a Heyting category with sums, hence 
preserves and reflects validity of statements in the internal logic. Finally, it also 
preserves and reflects smallness, in the sense that yf belongs to S iff f belongs 
to S. 

The category £ is obtained by formally adjoining quotients for bounded equiv- 
alence relations, as in [15l [14]. Furthermore, a map g: B >A in £ belongs to 

S iff it fits into a quasi-pullback square 

yD »B 

yf 9 

yC WA, 

with / belonging to S in £. 
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3.2 Consequences 



Among the consequences of these axioms we hst the following. 

Remark 3.2 For any object X in £, the slice category £/X is equipped with a 
class of small maps S/X, by declaring that an arrow p e £/X belongs to S/X 
whenever Sx/ belongs to <S. Any further requirement for a class of small maps 
should be stable under slicing in this sense, if it is to be a sensible addition. We 
will not explicitly check this every time we introduce a new axiom, and leave 
this to the reader. 

Remark 3.3 In a category £ with small maps the following internal form of 
"bounded separation" holds. If (j){x) is a formula in the internal logic of £ 
with free variable x £ X , all whose basic predicates are bounded, and contains 
existential and universal quantifications 3f and V/ only along small maps /, 
then 

A = {xeX\ (f>{x)} c X 

defines a bounded subobject of X. In particular, smallness of X implies small- 
ness of A. 

Remark 3.4 It follows from the axioms that any class of small maps S is also 

representable in the stronger sense that there is a universal small map tt: E >■ U 

such that for every small map /: X >-Y there is a diagram of the shape 




where the left square is a puUback, the right square is a puUback and p is a 
cover. Actually, this is how representability was stated in [27]. We have chosen 
the weaker formulation (R), because it is easier to check in some examples. 



Remark 3.5 Using the axioms (HE), (R), (HB) and (BE), it can be shown 
along the lines of Theorem 3.1 in [27] that for any class of small maps the 
following axiom holds: 

(PE) (Existence of power class functor) For any object C in £ there exists a 
power object VsC and a small relation Ec'Q C x VsC such that, for any D 

and any small relation i? C C x D, there exists a unique map p: D >VsC 

such that the square: 



R- 



C xD- 



1 Xp 



> C X VsC 
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is a puUback. 

In addition, one can show that the object VgC is unique (up to isomorphism) 
with this property, and that the assignment C ^ VgC is functoriaL 

A special role is played by fJf, — Vsl, what one might call the object of 
bounded truth- values, or the bounded subobject classifier. There are a couple of 
observations one can make: bounded truth- values are closed under small infima 
and suprema, implication, and truth and falsity are bounded truth- values. A 

subobject ni: A >X is bounded, when the assertion "a; S A" has a bounded 

truth-value for any x G X, as such bounded subobjects are classified by maps 
X 

Remark 3.6 (See [5].) When f is a category with a class of small maps S, and 
we fix an object X £ £, we can define a full subcategory Sx of £/X, whose 
objects are small maps into X. The category Sx is a Heyting pretopos, and 
the inclusion into £/X preserves this structure; this was proved in [5]. This 
result can be regarded as a kind of categorical "soundness" theorem, in view 
of the following corresponding "completeness" theorem, which is analogous to 
Grothendieck's result that every pretopos arises as the coherent objects in a 
coherent topos (see [211 Section D.3.3]). 

Theorem 3.7 Any Heyting pretopos H. arises as the category of small objects 
Si in a category £ with a class of small maps S. 

This theorem was proved in [5], where, following [3], the objects in £ were called 
the ideals over Ti. 

3.3 Strengthenings 

For the purpose of constructing models of important (constructive) set theories, 
we will consider the following additional properties which a class of small maps 
may enjoy. 

(NE) (Existence of nno) The category £ possesses a natural numbers object. 
(NS) (Smallncss of nno) In addition, it is small. 

There is no need to impose (NE), as it follows from (WE). The axiom (NS) 
is necessary for modelling set theories with Infinity. The property (PE) in 
Remark 13. 51 has a similar strengthening, corresponding to the Power set Axiom: 

(PS) (Smallness of power classes) For each X the "Ps-functor on £/X preserves 
smallness of objects over X. 
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Both (NS) and (PS) were formulated in for the purpose of modelhng IZF. 

Remark 3.8 (Cf. [3].) Let X be an object in a category with small maps 
{£,S) satisfying (PS). The category Sx is a topos, and the inclusion into £/X 
preserves this structure. In fact, every topos arises in this way: 

Theorem 3.9 Any topos Ti arises as the category of small objects Si in a 
category equipped with a class of small maps satisfying (PS) . 

Like Theorem 13.71 this is proved in [3] using the ideal construction. 

We will also need to consider requirements corresponding to the axioms 
of Full Separation and Fullness. To Full Separation corresponds the following 
axiom, introduced in QJ\: 

(M) All monos are small. 

A categorical axiom corresponding to Fullness was first stated in |9j . In order to 

formulate it, we need to introduce some notation. For two morphisms A >X 

and B >X, we will denote by Mx{A,B) the poset of multi- valued functions 

from A io B over X, i.e. jointly monic spans in £ / X, 

A^ P >B 

with P >X small and the map to A a cover. By puUback, any f:Y >X 

determines an order preserving function 

f*:Mx{A, B)^MY{f*A, f*B). 

(F) For any two small maps A >X and B >X, there exist a cover p: X' >X, 

a small map f:C >X' and an element P G Mc{f*p* A, f*p* B), such 

that for any g: D yX' and Q e MD{g*p* A, g*p* B), there are mor- 
phisms x: E >Z3 and y: E >C, with gx — fy and x a cover, such 

that x*Q> y*P. 

Though complicated, it is "simply" the Kripke-Joyal translation of the state- 
ment that there is for any pair of small objects A and B, a small collection P 
of multi- valued relations between A and B, such that any multi- valued relation 
contains one in P. 

3.4 Relation to other settings 

The axioms for a category with small maps {£^5) as we have presented them 
are very close to the original axioms as presented by Joyal and Moerdijk on 
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pages 6-8 of their book [57]. We only require the weak form of exactness of 
(BE) (instead of ordinary exactness), and added the axioms (WE), (HB) and 
(US). 

Since the appearance of [27_, various axiomatisations have been proposed, 
which can roughly be subdivided into three groups. To the first group belong 
axiom systems extending the original presentation in [27] . Already in [27 | , it is 
shown how to extend these axioms for the purpose of obtaining models for IZF, 
and this is followed up in [5H]. In [T^] Gambino introduces an extension of the 
original axiomatisation leading to models of predicative set theories. 

A second group of papers starts with Simpson's [3S] and comprises [21 [131 
[36l[4l[5]. In these axiomatisations, the following axioms which are here taken 
as basic are regarded as optional features: the Collection Axiom (C), Bounded 
Exactness (BE), and also (WE) (although they all hold in the category of 
ideals). Instead, the existence of a 'Ps-functor as in (PE) is postulated, as is a 
model of set theory, either in the form of a universe, or a universal object. In 
the approach taken here, these are properties derived from the existence of a 

universal small map tt: E >U. Part of the purpose of this paper is to make 

clear that the results for axiom systems in [35l [31 [5] also hold for our axioma- 
tisation. We list the achievements in order to make a comparison possible: in 
[35] . Simpson obtained a set-theoretic completeness result for an impredicative 
set theory (compare Theorem 14. 4p . Then in Awodey, Butz, Simpson and 
Streicher prove a categorical completeness result of which our Theorem 13.91 is 
variant. A predicative version of this result which does not involve W- types but 
is otherwise analogous to Theorem 13.71 above, was then proved by Awodey and 
Warren in ^ . 

The fact that our set-up contains the Collection Axiom (C) makes it less 
appropriate for modelling set theories based on the axiom of Replacement. How- 
ever, in our theory this Collection Axiom plays a crucial role: for example, in the 
construction of the initial ZF-algebra from W- types (see Theorem 14.11 below) , 
or in showing the existence of the associated sheaf functor. 

A third group of papers starts with [33] > and continues with [5] [7] . These 
axiomatisations have a flavour different from the others, because here the axioms 
for a class of small maps do not extend the axioms for a class of open maps, as 
the Quotient Axiom (A6) is dropped. The aim of Moerdijk and Palmgren in [33] 
was to find an axiomatisation related to Martin-L6f 's predicative type theory 
which included the category-theoretic notion of a W-type, from which models 
of Aczel's CZF could be constructed. We will point out below that the same 
is true here (in fact, we can construct models of CZF proper, rather than of 
something less or more) . Another concern of [33j , which is also the topic of Van 
den Berg's paper [8] , is the stability of the notion of category with small maps 
under sheaves. The earlier results in [33] and [5] concerning sheafification were 
less than fully satisfactory. For the notion of category with small maps explained 
here, the theory of sheaves can be developed very smoothly (see Section 6), using 
the combination of the axioms (BE) and (US). We consider this one of the main 
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advantages of the present axiomatisation. 



4 Models of set theory 

For the purpose of discussing models of set theory, we recaU from |27, the notion 
of a ZF-algebra in a category with small maps {£,S). A ZF-algebra V is an ob- 
ject in £ equipped with two independent algebraic structures: on the one hand, 
it is an (internal) poset with small (in the sense of S) sups. On the other hand, 

it is equipped with an endomap s: V >V, called "successor". A morphism of 

ZF-algebras should preserve both these structures: the small suprema, and the 
successor. 

A crucial result is the following: 

Theorem 4.1 In any category with small maps {£,S), the initial ZF-algebra 
exists. 

This theorem can be proved along the lines of |33j . Indeed, one can consider 

the W-type associated to the universal small map n: E >U. One can then 

show that the equivalence relation given by bisimulation is bounded so that the 
quotient exists. This quotient is the initial ZF-algebra (more details will appear 
in [lO]). This initial ZF-algebra has a natural interpretation as a model of set 
theory. We think of the order as inclusion, suprema as union, and sx as {x}. 
This suggests to define membership as: 

xey : = sx < y. 

Since £ is a Heyting category, one can ask oneself the question which set- 
theoretic statements the structure (V, e) satisfies in the internal logic of £. The 
answer is given by the following theorem, whose second part was proved in |27j 
(the first part can be proved in a similar manner): 

Theorem 4.2 Let {£,S) be a category with small maps in which the natural 
numbers object is small (so (NS) holds). 

1. If{£,S) satisfies the Fullness Axiom (F), then the initial ZF-algebra mod- 
els CZF. 

2. If {£, S) satisfies the Power Set Axiom (PS) and the Separation axiom 
(M), then the initial ZF-algebra models IZF. 

Remark 4.3 To obtain models for classical set theories, one may work in 
Boolean categories. Initial ZF-algebras in such categories validate classical logic, 
and therefore model classical set theories. 



14 



As a counterpart to Theorem 14.21 we can formulate a completeness theorem: 

Theorem 4.4 The semantics of Theorem \4-S\ is complete for both CZF and 
IZF in the following strong sense. 

1. There is a category with small maps {£,S) satisfying (NS) and (F) such 
that its initial ZF-algebra V has the property that, for any sentence (p in 
the language of set theory: 

V^cj)^ CZF V- 4>. 

2. There is a category with small maps {£,S) satisfying (NS), (M) and 
(PS), such that its initial ZF-algebra V has the property that, for any 
sentence (p in the language of set theory: 

h </> ^ IZF h 0. 

To prove this theorem one builds the syntactic category of classes and a ZF- 
algebra V such that validity in V is the same as derivability in the appropriate 
set theory. Problems concerning (BE) are, of course, solved by appealing to 
Theorem l3.1l The first person to prove a completeness result in this manner was 
Alex Simpson in |35| for an impredicative set theory. A predicative variation is 
contained in [5 and [TOj . 

Remark 4.5 Every (ordinary, classical) set-theoretic model {M, e) is also sub- 
sumed in our account, because every such model there is an initial ZF-algebra 
Vm in a category with small maps {£m,Sm) having the property that for any 
set-theoretic sentence (j): 

Vm ^4>^M^4>. 

£m is of course the category of classes in the model M , with those functional 
relations belonging to Sm that the model believes to have sets as fibres, extended 
using Theorem 13. II so as to satisfy (BE). One could prove completeness of our 
categorical semantics for classical set theories along these lines. 

5 Examples 

We recall from [57^ the basic examples of categories satisfying our axioms. 

Example 5.1 The canonical example is the following. Let £ be the category 

of classes in some model of set theory, and declare a morphism f:X >Y to 

be small, when all its fibres are sets. If the set theory is strong enough, this 
will satisfy all our axioms, except for (BE), but an appeal to Theorem 13. II will 
resolve this issue. 
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Example 5.2 Let £ he category of sets (relative to some model of ordinary 

set theory, say), and let k be an infinite regular cardinal. Declare /: X >Y to 

be small, when all fibres of / have cardinality less than k. This will validate all 
our basic axioms, as well as (M). When k > oj, (NS) will also hold, and when 
K is inaccessible, (PS) and (F) will hold. 

Example 5.3 The following two examples are related to realisability, and 
define classes of small maps on the effective topos £ff (see [12 )• Recall that 

there is an adjoint pair of functors FH V, where F — £ff{l, —):£ff >Sets is 

the global sections hmctor. Fix a regular cardinal k > oj, and declare /: X >Y 

to be small, whenever there is a quasi-puUback square 

Q »X 

a I 

P — »y 

p 

with p a cover, and g a morphism between projectives such that Tg is K-small, 
in the sense of the previous example. This example was further studied by 
Kouwenhoven and Van Oosten in and shown to lead to McCarty's realis- 
ability model of set theory for an inaccessible cardinal k, (see [3T]). 

Example 5.4 Another class of small maps on £ff is given as follows. Call 
a map f:X >Y small, whenever the statement that all its fibres are sub- 
countable is true in the internal logic of £ff (a set is subcountable, when it is 
the quotient of a subset of the natural numbers). These maps were studied in 
[24j and dubbed "quasi- modest" in [22,. The first author showed they lead to 
a model of CZF in which all sets are subcountable, and therefore refutes the 
Power Set Axiom (see [7j). He also showed the model is the same as the one 
contained in |32 and [3D] . 

Example 5.5 Once again, fix an infinite regular cardinal k, and let C be a 
subcanonical site which is K-small, in the sense that every covering family has 
cardinality strictly less than k. We say that a sheaf X is K-small, whenever 
it is covered by a collection of representables whose cardinality is less than n. 

Finally, a morphism f:X >Y will be considered to be K-small, whenever for 

any map y: C >Y from a representable C € C the pullback f~^{y) as in 

rHy) >x 

s 



is a K-small sheaf. This can again be shown to satisfy all our basic axioms. Also, 
when K> Lo, (NS) will hold, and so will (PS) and (F), when k is inaccessible. 
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6 Predicative sheaf theory 



The final example of the previous Section, that of sheaves, can be internalised, 
in a suitable sense. Starting from a category with small maps {£, S), and an ap- 
propriate site C in £, one can build the category Sh£(C) of internal sheaves over 
C, which is again a Heyting category with stable, disjoint sums. Furthermore, 
there is a notion of small maps between sheaves, turning it into a category with 
small maps. In fact, stability of our notion of a category with small maps under 
sheaves is one of its main assets. Here we will limit ourselves to formulating 
precise statements, leaving the proofs for [TU]. 

For the site C we assume first of all that the underlying category is small, in 
that the object of objects Cq and of arrows Ci are both small. By a sieve on 
a G Co we mean a small collection of arrows into a closed under precomposition. 
We assume that the collection of covering sieves Cov(a) on an object a £ Cq 
satisfies the following axioms: 

(M) The maximal sieve Ma = {/ G Ci | cod(/) = a} belongs to Cov(a). 

(L) For any U £ Cov(a) and morphism /: b the sieve f*U — {g: c }-b \ fg S 

U} belongs to Cov(6). 

(T) If T is a sieve on a, such that for a fixed U G Cov(a) any puUback h*T 
along a map h: b >a G J7 is an element of Cov(6), then T G Cov(a). 

The definition of an (internal) presheaf and sheaf is as usual. 

Using the bounded exactness of {£,S) and assuming that the relation S G 
Cov(a) is bounded, one can show the existence of the associated sheaf functor 
(the cartesian left adjoint for the inclusion of sheaves into presheaves). This 
functor can then be used to prove in the usual way that the sheaves form a 
Heyting category with stable and disjoint sums. 

As the small maps between sheaves we take those that are "pointwise small" . 
Observe that there is a forgetful functor C/:Shf:(C) >£/Co, and call a mor- 
phism f:B >A of sheaves pointwise small, when Uf is. To show that these 

morphisnis form a class of small maps, we make two additional assumptions. 
First of all, we assume the Exponentiation Axiom in the "metatheory" {£,S): 

(HS) For any small map f:B >A, the functor Ilf:£/B £/A preserves 

small objects. 

Furthermore, we also assume that our site has a basis, meaning the following: 
for any a G Cq there is a small collection of covering sieves BCov(a) such that 

S G Cov(a) 3i? G BCov(a): i? C S. 

Note that the relation S G Cov(a) is bounded, when the site has a basis. 
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Theorem 6.1 Let {S,S) be a category with small maps, and letC be an internal 
site with a basis. If the class S satisfies (HS), then ShgiC) with the class 
of pointwise small maps is again a category with small maps satisfying (HS). 
Furthermore, all the axioms that we have introduced, (NS), (PS), (F) and 
(M), are stable in the sense that each of these holds in sheaves, whenever it 
holds in the original category. 

7 Predicative realisability 

In this Section we outline how the construction of [57] of a class of small maps in 
Hyland's effective topos (as in Example 5.3), can be mimicked in the context of 
a category with small maps {£,S) as introduced in Section 3. Our construction 
is inspired by the fact that the effective topos arises as the exact completion of 
the category of assemblies, as in [TBI . 

Let us start with a category with small maps {£,S) satisfying (NS) (so 
the nno in £ is small). The first observation is that we can internalise enough 
recursion theory in £ for doing realisability. In fact, enough can already be 
formalised in Heyting Arithmetic HA, so certainly in a category with small 
maps. We then define the category of assemblies, as follows. An assembly 
consists of an object A in £ together with a surjective relation a C N x A. For 
pairs (n, a) belonging to this relation, we write n 6 a(a), which we pronounce 
as "n realises (the existence of) a" ; surjectivity of the relation then means that 
every a e A has at least one realiser. A morphism / of assemblies from {B,P) 

to {A, a) is given by a morphism /: B >A in £ for which the internal logic of 

£ verifies that: 

there is a natural number r such that for all 6 G S and n e /3(6), the 
Kleene application r-n is defined, and realises f{b) (i.e. r-n e a{fb)). 

One can now prove that the category of assemblies f [^sm] relative to f is a 
Heyting category with stable and disjoint sums (see [23], where the assemblies 
occur as the -i^-separated objects in the effective topos). 

In order to describe the relevant exact completion of this category of as- 
semblies, we first outline a construction. Consider two assemblies {B,[3) and 

{A, a) and a morphism f:B >A, not necessarily a morphism of assemblies. 

Then this defines a morphism of assemblies (-B,/3[/]) >{A,a) by declaring 

that n G /3[/](6), whenever n codes a pair (no,ni) such that no G ctifb) and 
ni G P{h). In case / belongs to S and /3 is a bounded relation, a morphism of 
this form will be called a standard display map relative to S (this notion was 
pointed out to us by Thomas Strcicher). A display map is a morphism that 
can be written as an isomorphism followed by a standard display map. These 
display maps do not satisfy the axioms for a class of small maps; in particular, 
they are not closed under Descent and Quotients. Another problem is that the 
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category of assemblies is not exact, not even in the more limited sense of being 
bounded exact. 

Both problems can be solved by appealing to Theorem 13. II Or, to be more 
precise, they can be solved by constructing an exact completion for categories 
with a class of display maps, resulting in categories with small maps satisfying 
(BE) (how this is to be done will be shown in [TOj)- Recall that the small 
maps in the exact completion are precisely those g that fit into a quasi-puUback 
diagram 

yD WB 

yf 9 

yC WA, 

where / is a small map in the original category. Therefore it is to be expected 
that the class of small maps in the exact completion of a category with display 
maps satisfies Descent and Quotients even when the class of display maps in 
the original category from which it is defined, does not satisfy these axioms. In 
fact, as it turns out, the display maps between assemblies have enough structure 
for the maps g in the exact completion of assemblies that fit into a square as 
above with / a display map, to form a class of small maps. In this way, both 
problems with the category of assemblies can be solved at the same time by 
moving to the exact completion. Therefore we define the realisability category 
{£[£//], S[£ff]]) to be this exact completion of the pair {£[Asm],T>), where V 
is the class of display maps in the category of assemblies. 

Theorem 7.1 If{£,S) is a category with small maps satisfying (NS), then so 
is {£[£ff],S[£ff]]). Furthermore, all the axioms that we have introduced, (nS), 
(PS), (F) and (M), are stable in the sense that each of these holds in the 
realisablity category, whenever it holds in the original category. 

The initial ZF-algebra in the realisability category should be considered as 
a suitable internal version of McCarty's realisability model [31] (see also |28j). 
which in our abstract approach is also defined for predicative theories like CZF 
(compare ^34; ) . 
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